Read the docs
TI-2021-17431 Aliases CVE-2021-40360GHSA-8hg6-3x59-7xjr

Information disclosure in Siemens SIMATIC PCS 7 V8.2

Priority LOW 39CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 6). The password hash of a local user account in the remote server could be granted via public API to a user on the affected system. An authenticated attacker could brute force the password hash and use it to login to the server.

Why it matters now

EPSS 0.00682 52nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSIMATIC PCS 7 V8.2All versions—No fix listedCNA
SiemensSIMATIC PCS 7 V9.0All versions—No fix listedCNA
SiemensSIMATIC PCS 7 V9.1All versions < V9.1 SP1—No fix listedCNA
SiemensSIMATIC WinCC V15 and earlierAll versions < V15 SP1 Update 7—No fix listedCNA
SiemensSIMATIC WinCC V16All versions < V16 Update 5—No fix listedCNA
SiemensSIMATIC WinCC V17All versions < V17 Update 2—No fix listedCNA
SiemensSIMATIC WinCC V7.4All versions < V7.4 SP1 Update 19—No fix listedCNA
SiemensSIMATIC WinCC V7.5All versions < V7.5 SP2 Update 6—No fix listedCNA
  • SIMATIC PCS 7 V8.2 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V9.0 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V9.1 VendorSiemens Affected All versions < V9.1 SP1 Fixed in — No fix listed CNA
  • SIMATIC WinCC V15 and earlier VendorSiemens Affected All versions < V15 SP1 Update 7 Fixed in — No fix listed CNA
  • SIMATIC WinCC V16 VendorSiemens Affected All versions < V16 Update 5 Fixed in — No fix listed CNA
  • SIMATIC WinCC V17 VendorSiemens Affected All versions < V17 Update 2 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.4 VendorSiemens Affected All versions < V7.4 SP1 Update 19 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.5 VendorSiemens Affected All versions < V7.5 SP2 Update 6 Fixed in — No fix listed CNA

CPE configurations NVD · 53

CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*up to 8.2VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:9.0:-:*:*:*:*:*:*9.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:9.1:-:*:*:*:*:*:*9.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*before 7.4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:-:*:*:*:*:*:*7.4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1:*:*:*:*:*:*7.4 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update1:*:*:*:*:*:*7.4 sp1_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update10:*:*:*:*:*:*7.4 sp1_update10VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update11:*:*:*:*:*:*7.4 sp1_update11VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update12:*:*:*:*:*:*7.4 sp1_update12VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:* Versions up to 8.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:9.0:-:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:9.1:-:*:*:*:*:*:* Versions 9.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:* Versions before 7.4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:-:*:*:*:*:*:* Versions 7.4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1:*:*:*:*:*:* Versions 7.4 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update1:*:*:*:*:*:* Versions 7.4 sp1_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update10:*:*:*:*:*:* Versions 7.4 sp1_update10 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update11:*:*:*:*:*:* Versions 7.4 sp1_update11 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update12:*:*:*:*:*:* Versions 7.4 sp1_update12 Vulnerable ·Siemens
Show 43 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update13:*:*:*:*:*:*7.4 sp1_update13VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update14:*:*:*:*:*:*7.4 sp1_update14VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update15:*:*:*:*:*:*7.4 sp1_update15VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update16:*:*:*:*:*:*7.4 sp1_update16VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update17:*:*:*:*:*:*7.4 sp1_update17VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update18:*:*:*:*:*:*7.4 sp1_update18VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update2:*:*:*:*:*:*7.4 sp1_update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update3:*:*:*:*:*:*7.4 sp1_update3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update4:*:*:*:*:*:*7.4 sp1_update4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update5:*:*:*:*:*:*7.4 sp1_update5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update6:*:*:*:*:*:*7.4 sp1_update6VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update7:*:*:*:*:*:*7.4 sp1_update7VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update8:*:*:*:*:*:*7.4 sp1_update8VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update9:*:*:*:*:*:*7.4 sp1_update9VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:*7.5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:*7.5 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:*7.5 sp1_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:*7.5 sp1_update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:*7.5 sp2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:*7.5 sp2_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:*7.5 sp2_update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:*7.5 sp2_update3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:*7.5 sp2_update4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update5:*:*:*:*:*:*7.5 sp2_update5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:13:-:*:*:*:*:*:*13VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:13:sp1:*:*:*:*:*:*13 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:13:sp2:*:*:*:*:*:*13 sp2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:14.0.1:*:*:*:*:*:*:*14.0.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15:*:*:*:*:*:*:*15VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:-:*:*:*:*:*:*15.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_1:*:*:*:*:*:*15.1 update_1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_2:*:*:*:*:*:*15.1 update_2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_3:*:*:*:*:*:*15.1 update_3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_4:*:*:*:*:*:*15.1 update_4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_5:*:*:*:*:*:*15.1 update_5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_6:*:*:*:*:*:*15.1 update_6VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:-:*:*:*:*:*:*16VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update1:*:*:*:*:*:*16 update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update2:*:*:*:*:*:*16 update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update3:*:*:*:*:*:*16 update3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update4:*:*:*:*:*:*16 update4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:17:-:*:*:*:*:*:*17VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:17:update1:*:*:*:*:*:*17 update1VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update13:*:*:*:*:*:* Versions 7.4 sp1_update13 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update14:*:*:*:*:*:* Versions 7.4 sp1_update14 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update15:*:*:*:*:*:* Versions 7.4 sp1_update15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update16:*:*:*:*:*:* Versions 7.4 sp1_update16 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update17:*:*:*:*:*:* Versions 7.4 sp1_update17 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update18:*:*:*:*:*:* Versions 7.4 sp1_update18 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update2:*:*:*:*:*:* Versions 7.4 sp1_update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update3:*:*:*:*:*:* Versions 7.4 sp1_update3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update4:*:*:*:*:*:* Versions 7.4 sp1_update4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update5:*:*:*:*:*:* Versions 7.4 sp1_update5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update6:*:*:*:*:*:* Versions 7.4 sp1_update6 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update7:*:*:*:*:*:* Versions 7.4 sp1_update7 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update8:*:*:*:*:*:* Versions 7.4 sp1_update8 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update9:*:*:*:*:*:* Versions 7.4 sp1_update9 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:* Versions 7.5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:* Versions 7.5 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:* Versions 7.5 sp1_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:* Versions 7.5 sp1_update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:* Versions 7.5 sp2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:* Versions 7.5 sp2_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:* Versions 7.5 sp2_update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:* Versions 7.5 sp2_update3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:* Versions 7.5 sp2_update4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update5:*:*:*:*:*:* Versions 7.5 sp2_update5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:13:-:*:*:*:*:*:* Versions 13 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:13:sp1:*:*:*:*:*:* Versions 13 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:13:sp2:*:*:*:*:*:* Versions 13 sp2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:14.0.1:*:*:*:*:*:*:* Versions 14.0.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15:*:*:*:*:*:*:* Versions 15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_1:*:*:*:*:*:* Versions 15.1 update_1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_2:*:*:*:*:*:* Versions 15.1 update_2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_3:*:*:*:*:*:* Versions 15.1 update_3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_4:*:*:*:*:*:* Versions 15.1 update_4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_5:*:*:*:*:*:* Versions 15.1 update_5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_6:*:*:*:*:*:* Versions 15.1 update_6 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:-:*:*:*:*:*:* Versions 16 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update1:*:*:*:*:*:* Versions 16 update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update2:*:*:*:*:*:* Versions 16 update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update3:*:*:*:*:*:* Versions 16 update3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update4:*:*:*:*:*:* Versions 16 update4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:17:-:*:*:*:*:*:* Versions 17 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:17:update1:*:*:*:*:*:* Versions 17 update1 Vulnerable ·Siemens

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-40360
  2. 2026-10-03 Alias added: GHSA-8hg6-3x59-7xjr

References

Patch 1

  • TI-2014-07026 The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3… CVSS 2.0HIGH 10.0
  • TI-2019-08143 Missing authentication in Siemens SIMATIC PCS 7 V8.0 and earlier CVSS 3.1CRITICAL 9.8
  • TI-2023-11164 Code injection in Siemens SIMATIC PCS 7 CVSS 3.1CRITICAL 10.0
  • TI-2021-17429 Path traversal in Siemens SIMATIC PCS 7 V8.2 CVSS 3.1CRITICAL 9.9
  • TI-2019-08139 A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions)… CVSS 3.1HIGH 8.8
  • TI-2019-08137 SQL injection in Siemens SIMATIC PCS 7 V8.0 and earlier CVSS 3.1HIGH 8.8
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences